gsadmin/certctl
1
0
Fork 0
mirror of https://github.com/shankar0123/certctl.git synced 2026-06-07 12:21:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

legal: ship NOTICE + THIRD_PARTY_NOTICES.md (Phase 0 RED-3)

Browse Source 
Phase 0 closure (Path B2, post-rewrite, post-LICENSE-flip):

NOTICE — top-level file at repo root, certctl LLC copyright + BSL
1.1 reference + pointer at LICENSE and THIRD_PARTY_NOTICES.md.
Industry-standard format.

THIRD_PARTY_NOTICES.md — full inventory of binary-link dependencies:
  - 60 Go modules from `go list -deps ./...` (excluding stdlib +
    the certctl module itself). License distribution: 28 Apache-2.0,
    15 BSD-2/3-Clause, 14 MIT, 2 MPL-2.0, 1 ISC.
  - 48 npm production transitive deps from walking the
    `web/package.json` dependencies graph (excludes devDependencies
    — Vitest, Playwright, Vite, etc. don't ship in the bundle).
    License distribution: 35 MIT, 11 ISC, 1 BSD-3-Clause, 1
    MIT-AND-ISC.

Test-fixture-only deps (Cisco libest + f5-mock-icontrol) noted at
the end of THIRD_PARTY_NOTICES.md but excluded from the main table
because they don't ship in any distributed release artifact (libest
is a Docker sidecar invoked only by the est-e2e profile;
f5-mock-icontrol rebuilds from source per Phase 1 RED-1 closure).

Generation method documented inline so the file can be regenerated
deterministically when deps change. No tool dependency vendored —
the underlying `go list` + filesystem walk approach works against
any GOMODCACHE + node_modules state.

Closes: cowork/certctl-architecture-diligence-audit.html#fix-RED-3
This commit is contained in:
shankar0123
2026-05-13 21:20:27 +00:00
parent 5411c12841
commit 8c0c8aa69d
2 changed files with 179 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NOTICE
+18
View File
@@ -0,0 +1,18 @@
certctl
Copyright 2026 certctl LLC.
This product is distributed under the Business Source License 1.1.
See LICENSE at the repository root for the full license text and
the Additional Use Grant carve-outs.
This product links third-party Go modules and JavaScript packages
whose own license terms apply to those components. The full
inventory of third-party dependencies and their respective licenses
is enumerated in THIRD_PARTY_NOTICES.md at the repository root.
Effective March 14, 2076, the BSL 1.1 license converts to the
Apache License 2.0 per the Change Date in LICENSE.
For inquiries about commercial licensing terms outside the
Additional Use Grant — including the Commercial Certificate
Service restriction — contact certctl@proton.me.